Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c4b3cb26-ad47-36ab-9d1f-00f639ecb241.roa
File:                     c4b3cb26-ad47-36ab-9d1f-00f639ecb241.roa (raw, json)
Hash identifier:          URQHOFy/FkyDg1t/cazP/oGh0gx6paNY06WKVatN3fI=
Subject key identifier:   91:FE:58:E2:BA:AE:E5:27:3C:59:8B:A4:8C:AA:34:79:E6:A5:97:47
Certificate issuer:       /CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f
Certificate serial:       010D0C9F4328584F1E7D575C2FC07ED4BF45DF80
Authority key identifier: 72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c4b3cb26-ad47-36ab-9d1f-00f639ecb241.roa
Signing time:             Wed 09 Sep 2026 15:42:15 +0000
ROA not before:           Wed 09 Sep 2026 15:42:15 +0000
ROA not after:            Tue 08 Dec 2026 16:42:15 +0000
asID:                     6453
IP address blocks:        2620:10c:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:7d:57:5c:2f:c0:7e:d4:bf:45:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ad4f2f-87c3-436e-b0e5-3532e2109f9f
        Validity
            Not Before: Sep  9 15:42:15 2026 GMT
            Not After : Dec  8 16:42:15 2026 GMT
        Subject: CN=90daf6d3-9aa2-4767-b8a5-140f0a578725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:6b:a1:48:b0:6f:14:02:51:6a:9d:7d:8d:
                    f8:64:35:91:e2:38:31:28:36:1e:b1:c3:36:c2:09:
                    1d:c4:73:1d:87:12:e3:c6:64:36:bf:a9:55:8b:6b:
                    15:a9:1f:a9:3b:6c:1b:d6:eb:5a:1e:4a:8c:2c:c3:
                    ff:f3:b4:61:62:9d:a1:e2:3a:da:5c:5f:74:5a:e5:
                    6b:19:8b:11:c8:57:c4:ad:a9:f4:67:5d:5e:fb:05:
                    c8:e3:d0:71:5c:80:03:41:ca:b8:39:fe:81:82:67:
                    7a:66:ec:07:ca:b5:fd:9f:84:bf:33:6c:f7:99:84:
                    0f:29:33:80:2d:d4:5b:15:93:d5:b4:08:2f:0c:a5:
                    03:f5:0e:e7:a9:48:34:f9:c5:c1:63:e7:4c:8f:98:
                    58:c6:ef:01:29:c8:bd:4d:bc:29:1e:ef:9e:64:00:
                    35:f7:84:f4:6b:d3:ec:20:0e:4d:a6:17:f1:11:bc:
                    33:af:3a:fd:98:e3:05:86:1a:f8:6b:ed:84:f6:dc:
                    9a:37:78:96:11:71:a1:a2:60:65:f0:e7:16:26:74:
                    2d:05:6d:bf:83:b9:b4:7d:c0:e6:b6:5f:49:ee:33:
                    28:b5:3f:8b:97:36:66:0e:a9:0a:28:1d:46:39:7d:
                    9c:3d:37:13:30:92:61:6a:d0:f0:3a:b7:a0:21:dd:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FE:58:E2:BA:AE:E5:27:3C:59:8B:A4:8C:AA:34:79:E6:A5:97:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c4b3cb26-ad47-36ab-9d1f-00f639ecb241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.crl

            X509v3 Authority Key Identifier:
                keyid:72:BF:7F:A2:49:19:D0:1A:D3:D7:C6:27:B5:D1:B9:FD:CF:DA:D3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3ad4f2f-87c3-436e-b0e5-3532e2109f9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10c:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:41:8c:b8:8a:b7:b8:9f:a5:e0:e1:9e:5a:22:80:1c:53:44:
         b3:05:ad:97:76:47:4b:46:aa:6a:85:fe:81:c9:ad:46:1d:87:
         4a:ee:fa:81:21:41:af:92:7e:13:6a:40:fa:0d:ce:f1:be:14:
         b7:2b:55:95:53:5c:30:e3:cd:36:5e:5d:7e:a6:a7:a0:3b:e0:
         18:8c:5b:6b:35:89:e3:70:f3:b8:16:bb:3b:1f:53:ee:68:78:
         96:e5:ea:52:49:0f:b1:8d:94:6a:87:b1:cc:c1:ae:cc:0c:58:
         56:32:73:58:00:2c:8f:11:7c:85:37:26:f4:1e:c4:0a:94:3b:
         50:a4:8f:36:e4:0c:cf:e5:b8:ee:a7:0e:43:59:1c:70:f8:80:
         68:d3:9b:ac:07:75:79:dc:5b:ec:82:75:98:f1:b4:e0:20:40:
         5a:f1:72:a5:b7:6a:d5:bc:0c:76:03:70:ff:ca:b2:12:3a:97:
         73:85:b5:e4:43:c7:2b:4b:96:a7:89:0d:ae:8c:03:94:05:93:
         e4:95:af:c5:29:d3:2e:af:4f:d2:3d:00:ac:82:03:1b:5d:68:
         e7:e8:d4:a1:24:19:69:32:ce:72:09:c1:60:36:9a:9b:e8:40:
         2a:f3:fc:79:03:61:5c:b9:f3:15:d4:e9:cd:ee:a3:96:09:4f:
         b7:10:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:42 2026 by rpki-client